Findings

CVE-2017-0222

Microsoft Internet Explorer Remote Code Execution Vulnerability

Published May 12, 2017 · updated Jun 16, 2026 · microsoft internet explorer

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.

Timeline

Detection, updates, and resolution for this record.

  1. May 12, 2017 · Catalog

    Detected

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.

  2. Feb 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Aug 25, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.

Required action

Apply updates per vendor instructions.

CISA due date Aug 25, 2022

Affected

  • cpe microsoft/internet explorer11
  • cpe microsoft/internet explorer9
  • vendor Microsoft Internet Explorerversion unspecified

Sources

  • CISA KEVCVE-2017-0222

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.

    cisa.gov
  • CVE.orgCVE-2017-0222

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2017-0222

    30-day exploitation probability 29.6%

    first.org
  • NIST NVDCVE-2017-0222

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0226.

    nvd.nist.gov

References